Congratulations to everyone who failed to take me up on https://nondeterministic.computer/@mjg59/115048295075274818 - good choice since (a) as far as I can tell no Linux distribution was ever signed with a certificate that expired on 2025-09-11, and (b) all the Windows systems signed with a certificate that *did* expire then are still booting fine